Read the docs

hayyatapps

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

hayyatapps records in CISA KEV

No hayyatapps vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2025-13296 CVE-2025-14554 · GHSA-9w62-m7xw-g7m6

Cross-site scripting in hayyatapps Sell BTC – Cryptocurrency Selling Calculator

Priority LOW 38

The Sell BTC - Cryptocurrency Selling Calculator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'orderform_data' AJAX action in all versions up to, and including, 1.5 due to insufficient input…

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00354 Published 2026-01-31 No fix listed CWE-79
TI-2025-12362 CVE-2025-13531 · GHSA-r66h-95rg-mcj6

Stylish Order Form Builder <= 1.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'product_name' Parameter

Priority LOW 28

The Stylish Order Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'product_name' parameter in all versions up to, and including, 1.0 due to insufficient input sanitization and outpu…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00289 Published 2026-01-07 No fix listed CWE-79
Open these records in search →